Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1bf2ff8f-358c-3f13-b639-aae605d478e0.roa
File:                     1bf2ff8f-358c-3f13-b639-aae605d478e0.roa (raw, json)
Hash identifier:          z4BAS4Fkll6ijqphXMnZG6yJRAHOLjAvtdP572VecUM=
Subject key identifier:   C4:14:D6:5E:04:B6:DB:C5:F1:2E:80:F5:D5:10:7F:8F:9D:BE:4D:4B
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584B821DC1B6DE2DF29195629F80
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1bf2ff8f-358c-3f13-b639-aae605d478e0.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     33363
IP address blocks:        97.97.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:c1:b6:de:2d:f2:91:95:62:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=3f61a9e0-baf5-4a9b-9a71-9cb71553e0d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d1:f5:95:74:39:9b:6f:dc:6a:e1:36:f0:dc:
                    bb:3d:ed:77:c7:d5:43:2e:81:60:01:70:ff:41:9f:
                    98:14:bb:1c:9e:09:3d:60:0e:f6:08:b7:56:65:27:
                    7c:58:ac:0f:a5:56:56:03:e4:be:e9:74:ad:af:f0:
                    fd:58:f0:b8:ce:4a:c9:85:70:af:75:8e:49:28:26:
                    73:d8:17:af:bb:ff:f3:62:0c:ed:44:1f:81:7d:7a:
                    eb:3c:9a:0f:44:47:c2:00:64:ca:4a:a6:dd:72:70:
                    f1:59:8a:43:56:1f:8a:74:ac:cd:d5:af:8a:67:e5:
                    84:f8:a1:12:1f:c9:6e:fb:34:08:90:93:52:e0:c9:
                    8e:e8:49:58:3c:17:cb:ad:97:2f:31:46:8d:52:42:
                    9f:91:76:a9:ba:73:3a:22:a8:d4:36:68:14:8a:9c:
                    8a:48:78:8f:bc:fe:b7:73:7f:08:5c:30:ff:72:c1:
                    3e:02:f1:bc:b1:92:cf:49:4a:91:12:7d:c6:14:6b:
                    5c:27:01:9b:68:af:72:72:b1:7b:2c:cd:d0:0a:cc:
                    9d:66:4f:77:f5:8a:82:bb:13:f7:d0:b5:ba:07:10:
                    b0:88:ce:37:9b:e2:46:7e:98:4f:66:0c:f8:f3:34:
                    ec:8b:47:7e:60:03:ef:ab:ba:d7:d9:45:3e:63:e9:
                    3d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:14:D6:5E:04:B6:DB:C5:F1:2E:80:F5:D5:10:7F:8F:9D:BE:4D:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/1bf2ff8f-358c-3f13-b639-aae605d478e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.97.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:d2:d5:6c:78:09:7a:17:21:f4:95:59:78:49:79:16:b4:3d:
         f2:c1:a9:9e:33:bc:e8:51:24:a2:6e:05:7b:a0:1c:53:7d:f1:
         85:39:8f:f4:9a:9f:64:eb:9c:49:08:4b:33:ff:b8:3d:6a:a1:
         e4:3a:3f:da:99:10:2a:69:97:df:1d:bb:a0:f2:a0:85:15:8a:
         5e:eb:27:ab:51:24:9e:89:c3:6d:f8:79:5e:c2:ae:e3:53:55:
         a1:ef:6a:df:93:0c:b6:0d:6d:58:73:fe:1f:cb:c3:b2:05:22:
         bf:ad:3d:57:e1:dd:84:79:b9:4b:66:1c:02:61:5e:3d:82:69:
         7f:59:61:72:e0:f6:59:e4:68:a3:00:1b:9d:c2:3a:26:f8:37:
         33:05:c1:e3:12:b4:6f:e5:3e:2d:6e:5d:20:c1:b9:20:1b:13:
         8a:1d:ac:e1:da:1d:56:16:ce:13:45:81:72:e3:f2:20:f9:a4:
         7e:68:95:60:b5:90:60:16:3f:9f:34:fd:73:07:56:b2:66:de:
         11:4f:4f:72:85:e8:6a:7a:94:19:ca:eb:1b:45:35:1c:3b:7d:
         1a:df:d4:25:1c:48:03:84:da:56:23:48:35:63:5d:53:7f:68:
         76:99:24:04:c7:b2:35:d4:2d:db:7b:24:eb:8a:16:29:3a:be:
         b5:78:ca:0e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHcG23i3ykZVin4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk
M2Y2MWE5ZTAtYmFmNS00YTliLTlhNzEtOWNiNzE1NTNlMGQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdH1lXQ5m2/cauE28Ny7Pe13x9VDLoFgAXD/
QZ+YFLscngk9YA72CLdWZSd8WKwPpVZWA+S+6XStr/D9WPC4zkrJhXCvdY5JKCZz
2Bevu//zYgztRB+BfXrrPJoPREfCAGTKSqbdcnDxWYpDVh+KdKzN1a+KZ+WE+KES
H8lu+zQIkJNS4MmO6ElYPBfLrZcvMUaNUkKfkXapunM6IqjUNmgUipyKSHiPvP63
c38IXDD/csE+AvG8sZLPSUqREn3GFGtcJwGbaK9ycrF7LM3QCsydZk939YqCuxP3
0LW6BxCwiM43m+JGfphPZgz48zTsi0d+YAPvq7rX2UU+Y+k9cwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMQU1l4EttvF8S6A9dUQf4+dvk1LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvMWJmMmZmOGYtMzU4Yy0z
ZjEzLWI2MzktYWFlNjA1ZDQ3OGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGYWGAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE/S1Wx4CXoXIfSVWXhJeRa0PfLBqZ4zvOhRJKJuBXugHFN98YU5j/Sa
n2TrnEkISzP/uD1qoeQ6P9qZECppl98du6DyoIUVil7rJ6tRJJ6Jw234eV7CruNT
VaHvat+TDLYNbVhz/h/Lw7IFIr+tPVfh3YR5uUtmHAJhXj2CaX9ZYXLg9lnkaKMA
G53COib4NzMFweMStG/lPi1uXSDBuSAbE4odrOHaHVYWzhNFgXLj8iD5pH5olWC1
kGAWP580/XMHVrJm3hFPT3KF6Gp6lBnK6xtFNRw7fRrf1CUcSAOE2lYjSDVjXVN/
aHaZJATHsjXULdt7JOuKFik6vrV4yg4=
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:35:17 2025 by rpki-client